May I ask have you selected “ECC” while generating an Origin CA Certificate or rather “RSA” from the Cloudflare dashboard → SSL/TLS → Origin server → Origin Certificates → Create certificate?
Therfore, when you copy-pasted the “root” .pem file was it “ECC” or “RSA”?
Have you restarted your service at server (in case if something is cached or not loaded due to the new certs being applied, etc.)?
Kindly, could you try doing it again? Try to re-generate “ECC” Origin CA certificat and make sure to copy-paste the “root .pem” which is also “ECC”.
It might be possible that the cause is that I have generated an origin cert with “zzyyzz.domain.com.es” and *.domain.com.es" and I only have DNS records A type for the subdomains and not for the “zzyyzz.domain.com.es” domain?
It might be possible that this is because I don’t have DNS records for my domain and only have DNS records for the subdomains, and the cert I generated was with “mydomain.com.es” and “*.mydomain.com.es” and the first one doesn’t have a DNS record?
“.com.es” is a TLD like “.net”
EDIT: I Confirm that this was why it wasn’t working, creating a cert with a subdomain or with a *.domain.com.es works.
